# BringPass compatibility pilot brief

Status: worksheet, not a booking or purchase. Fill locally; the site submits nothing.

## Contacts and scope
Provider / process owner:
Technical owner:
Privacy / security reviewer:
Pilot location:
Reader model and firmware:
Backend name and version:
Credential format / medium:
External credential policy:
Compatibility class for each operation (C0 / C1 / C2 / X):
Existing desk/self-service registration controls:
Existing revocation/retraction controls:
Participants and duration:
Fallback / rollback owner:

## Narrow claim under test
“We can accept a user-supplied credential in this workflow without weakening the
existing required assurance level.” Start with non-critical, reversible use.

## Before launch
[ ] Provider permission and assurance requirements documented.
[ ] Reader output captured exactly, including prefixes and leading zeros.
[ ] Backend uniqueness, format limits and multiple-credential support checked.
[ ] No protected-credential cloning or vendor-key bypass.
[ ] Privacy and loss/recovery implications explained to participants.
[ ] Recovery and rollback exercised, not merely described.

## Test cases
[ ] Existing account / new credential.
[ ] New account / new credential, with normal identity checks.
[ ] Duplicate credential rejected without linking to the wrong account.
[ ] Unsupported format rejected clearly.
[ ] Valid presentation recognised; invalid value rejected.
[ ] Planned replacement, including a single-field backend if relevant.
[ ] Lost credential revoked; all necessary reader caches updated.
[ ] Same legacy value on two carriers: both rejected after revocation.
[ ] Temporary credential expiry enforced.
[ ] Retract all BringPass bindings without closing the underlying membership.
[ ] Local profile deletion does not claim provider revocation.
[ ] Revert to the previous credential or issue a fallback.

## Measurements
Read success rate:
Staff minutes per enrolment:
User support requests:
Replacement / recovery effort:
Avoided card issuances:
Additional licences / integration work:
Observed privacy / security issues:

## Go / change / stop
Decision:
Evidence:
Unresolved risks:
Next test:
Sign-off: